rsg-log-server (>=0.0.2, <=0.0.3), rsg-metrics-server (>=0.0.1, <=0.0.10) +1 more potentially affected by CVE-2020-7714 via confucious (>=0.0.2, <=0.0.10)

confucious NPM version =0.0.2, =0.0.2, =0.0.1, =1.1.0, =1.6.0 Source cves: CVE-2020-7714 Source advisory: OSV:GHSA-FMRR-MX6J-H3H5...

CVE-2020-7714

All versions of package confucious are vulnerable to Prototype Pollution via the set function...

CVE-2020-7714 Prototype Pollution

All versions of package confucious are vulnerable to Prototype Pollution via the set function...